Skip to content
Sign in
7.2 High

CVE-2026-53676 ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed…

Description

ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product with the tenant administrator privilege (TENANT_ADMIN).

Affected products and versions

Product Affected versions Fixed in
thingsboard Versions not published

Other CVEs of thingsboard

The 3 CVEs of thingsboard →
CVE-2025-34281 ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image… 6.2 Medium CVE-2024-3270 A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2 3.8 Low
Track this CVE